Enforcing SIEM policy which are applied by policy assignment rules

[User55864285]

Hello team, I've created SIEM policy and assignment rules (using ePo) but they aren't actually being applied to the client unless I manually enforce it. Is there a way we can ensure that the policy which is applying is in enforced mode on the client(S)? Thanks. Regards, Shaine

EDIT: To clarify, I'm looking for a solution/method to apply and enforce the policy to individual clients within a single system tree group/subgroup.

[pbpillai]

You can create a Client task separately in ePO for the individual clients & then schedule it to run automatically at the desired time.

You can get more inputs from the ePO team, if this question is posted in the ePO community as you are enforcing using the ePO.

Regards,

Prashanth B Pillai

McAfee Technical Support

Customer Success Group

[User55864285]

Hi Prashanth,
Thank you for taking the time to reply. I've already created the required client task and it shows that the policy is applied. But when I check on the client itself to see if it is getting the custom SIEM General Configuration, it is not. Not unless I enforce it. So just wanted to know how to get it applied and skip the manual process of enforcing.

Regards,
Shaine

[pbpillai]

The ePO team should be able to help you with this request. Please post in ePO community.